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Abstract 

We establish a general method for proving bounds on the information that can be extracted via 
arbitrary entangled measurements on tensor products of hidden subgroup coset states. When applied 
to the symmetric group, the method yields an n{n log 7i) lower bound on the number of coset states over 
which we must perform an entangled measurement in order to obtain non-negligible information about 
a hidden involution. These results are tight to within a multiplicative constant and apply, in particular, to 
the case relevant for the Graph Isomorphism problem. 

Part of our proof was obtained after learning from Hallgren, Rotteler, and Sen that they had obtained 
similar results. 
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1 Introduction: the hidden subgroup problem 



Many problems of interest in quantum computing can be reduced to an instance of the Hidden Subgroup 
Problem (HSP). This is the problem of determining a subgroup H of & group G given oracle access to a 
function f : G ^ S with the property that f{g) = f{hg) <^ h ^ H. Equivalently, / is constant on the 
cosets of H and takes distinct values on distinct cosets. 

All known efficient solutions to the problem rely on the standard method |3, in which we prepare a 
uniform superposition over the elements of G and measure the value of the oracle on this superposition. 
This yields a uniform superposition over a uniformly random left coset, \cH) = {1/ ^J\H\) Ylih&H 1*^^)' 
or equivalently a mixed state, pu = (1/|G|) X^ceG 1*^-^) ("^-^1- "^^'^ question is how much information 
about the subgroup H can be gained by measuring this state. Fourier sampling measures pu according to 
the Fourier basis, i.e., according to the in^educible representations of G; as we discuss below, the optimal 
measurement is always of this type. 

History of the Hidden Subgroup Problem. Both Simon's and Shor's seminal algorithms rely on the 
standai^d method over an abelian group. In Simon's problem l36ll . G = Z2 and / is an oracle such that, for 
some y, f{x) = f{x + y) for all x; in this case H = {0, y} and we wish to identify y. In Shor's factoring 
algorithm 05l G is (essentially) the group Z* where n is the number we wish to factor, f{x) = mod n 
for a random r < n, and H is the subgroup of Z* whose index is the multiplicative order of r. 

While the nonabelian hidden subgroup problem appears to be much more difficult, it has very attractive 
applications. In particular, solving the HSP for the symmetric group Sn would provide an efficient quantum 
algorithm for the Graph Automorphism and Graph Isomorphism problems (see e.g. Jozsa ifTOll for a review). 
Another important motivation is the relationship between the HSP over the dihedral group with hidden shift 
problems |6| and cryptographically important cases of the Shortest Lattice Vector problem l32ll . 

So far, algorithms for the HSP are only known for a few families of nonabelian groups l33lfT8l l9l l25lfT6l 
|2l. Ettinger and H0yer fV^ provided another type of result (see also 13111 ) by showing that Fourier sampling 
can solve the HSP for the dihedral groups Dn in an information-theoretic sense. That is, a polynomial 
number of experiments gives enough information to reconstruct the subgroup, though it is unfortunately 
unknown how to determine H from this information in polynomial time. 

To discuss Fourier sampling for a nonabelian group G, one needs to consider representations of the 
group, namely homomorphisms p : G ^ U(y) where U{V) is the group of unitary matrices acting on 
some C-vector space V of dimension dp. It suffices to consider irreducible representations, namely those 
for which no nontrivial subspace of V is fixed by the various operators p{g). Once a basis for each ir- 
reducible p is chosen, the matrix elements pij provide an orthogonal basis for the vector space of all C- 
valued functions on G. The quantum Fourier transform then consists of transforming (unit-length) vectors 
in C[G] = {J2geG'^g Iff) I Q^g ^ C} from the basis {\g) | 5 G G} to the basis {\p,i,j)} where p is the 
name of an irreducible representation and I < i,j < dp index a row and column (in a chosen basis for V). 
Indeed, this transformation can be earned out efficiently for a wide variety of groups l3l fT5ll24l . 

A basic question concerning the hidden subgroup problem is whether there is always a basis for the 
representations of G such that measuring in this basis provides enough information to determine the sub- 
group H. This framework is known as strong Fourier sampling. In l28ll . Moore, Russell and Schulman 
answered this question in the negative, showing that subgroups of 5„ relevant to Graph Isomorphism can- 
not be determined by this process; more generally, they showed that no subexponential number of positive 
operator-valued measurements (POVMs) of individual coset states suffices. 
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The next logical step is to consider multi-register algorithms, in which we prepare multiple coset states 
and subject them to entangled measurements. Ettinger, H0yer and Knill 0| showed that the HSP on arbitrary 
groups can be solved information-theoretically with a polynomial number of registers, and the authors of 
this article have shown how to carry out such a measurement for the case relevant to Graph Isomorphism 
in the Fourier basis l26l . For the dihedral group D„, Ip lITTl showed that the optimal measurement for 
two registers is entangled, and Kuperberg l23ll devised a subexponential (2'^(v^^°s")) algorithm that works 
by performing entangled measurements on two registers at a time. Bacon, Childs, and van Dam 1^ 
determined the optimal multiregister measurement for certain metabelian groups, and use this to devise the 
first efficient multiregister algorithms. The present authors have generalized these optimality results to the 
case where H and G form a Gel'fand pair 1271 . 

Our contribution. Whether a similar approach can be applied to the symmetric group, offering an efficient 
algorithm for Graph Isomorphism, is the principal open question in this area. Here we establish a general 
method for bounding the information that can be extracted by arbitrary entangled measurements on tensor 
products of coset states. These bounds give rise to the following theorem: 

Theorem 1. Suppose we are given the coset state on k registers for the hidden subgroup H = {1, m} 
where m is chosen uniformly at random from a conjugacy class M of involutions. Given that we observe 
the representation p = pi ® ■ ■ ■ ® pk, let B be a basis for p, let !Km(b) be the probability that we observe 
the vector b G i?, and let IX be the uniform distribution on B. Then there is a constant C > such that, if 
k < Cn log2 n, with probability 1 — in m and p, we have 

||?{™-U||i = n-^(") . 

Thus, unless k = Q{n log n), it takes a superpolynomial number of experiments to distinguish the different 
subgroups H = {1, m} from each other, or from the trivial subgroup, for which the observed distribution 
is uniform. Along with the fact that 0{n log n) registers suffice |8l|26l, this shows that entangled measure- 
ments over Q{n log n) registers are both necessary and sufficient. 

Note that this result is much stronger than the claim that the total query complexity of this case of the 
Hidden Subgroup Problem is 0(nlogn) (where each query consists of generating a coset state); indeed, 
one can immediately obtain lower bounds on the query complexity of determining an involution m by 
embedding into S2n- In fact, these bounds can be obtained even without the assumption that each query 
generates a coset state |22l|. The query complexity of the decision problem of whether H is of the form 
{1, m} or is trivial was recently shown to be Q.{n) in a natural hidden shift model |i5J. 

Such query complexity lower bounds, however, do not preclude the possibiUty of using multiple inde- 
pendent applications of (single-register) Fourier sampling to solve the problem; for instance, in the dihedral 
group, each such measurement yields a constant amount of information fT\. In contrast, the result proved 
here shows that in order to gain non-negligible information about the hidden subgroup, and thus about 
whether the two graphs are isomorphic or not, one must measure 0(log \ G\) registers simultaneously in an 
entangled basis. This greatly restricts the set of possible quantum algorithms for Graph Isomorphism. 

Remark. A preliminary version of this paper appeared in ll29l where we developed a general framework 
for bounding the available information in the multiregister case, including Lemmas 2-5, and showed that 
entangled measurements over two registers are insufficient. The proof of Lemma |9lbelow, on which Theo- 
rem Q depends, was obtained after learning from Hallgren, Rotteler, and Sen that they had obtained results 
similar to Theorem [^by building on the machinery of ll29l . 
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2 The structure of the optimal measurement 



We focus on the special case of the hidden subgroup problem called the hidden conjugate problem in ll25l . 
Here there is a (non-normal) subgroup H, and we are promised that the hidden subgroup is one of its 
conjugates, = g^^Hg for some g & G; the goal is to determine which. 

The most general possible measurement in quantum mechanics is a positive operator-valued measure- 
ment (POVM). It is easy to see I28J that the optimal POVM for the Hidden Subgroup Problem on a single 
coset state consists of measuring the name p of the in^educible representation, followed by a POVM on 
the vector space V on which p acts. For simplicity, here we will restrict ourselves to von Neumann mea- 
surements, in which we measure the space on which p acts according to some orthonormal basis B. As 
in l28li29J our results can easily be extended to ai^bitraiy POVMs. 

Under Fourier sampling, the probability we observe p, and the conditional probability that we observe a 
given be B, are given by 

^{p) = ^rkUH and :Kip,h) = (2.1) 
|G| rk IIh 

where Hh is the projection operator l/\H\ J2heH pW- When H is nontrivial, the probability distribution 
over B changes for a conjugate in the following way: 



where we write gh for p{g)h. In contrast, if H is the trivial subgroup, Hh = 1^ and 'K{p) is the Plancherel 

il/\G\,wd%{p,hj) = l/dp 



distribution J'(p) = d^ /\G\, and 'K{p, bj) = 1/dp is the uniform distribution. 



3 The expectation and variance of an involution projector 

Definition 1. Let p be a representation of a group G acting on a space V and let a be an irreducible 
representation of G. We let 3^ denote the projection operator onto the cr-isotypic subspace of V, the 
subspace spanned by all copies of a in p. We remark that this projection operator can written as the 
sum DiffV = X%i9)g^> regardless of the structure of p. See, e.g., If34\l . 

The following two lemmas are proved in [ 28|; we repeat them here for convenience. 

Lemma 2. Let p be a representation of a group G acting on a space V and let h £ V. Let m be chosen 
uniformly from a conjugacy class M of involutions. If p is irreducible, then 

Exp^(b,mb) = ^4^||bf . 

dp 

If p is reducible, then 

Exp,^(b,mb) = J^^IU^bf . 

Lemma 3. Let p be a representation of a group G acting on a space V and let h £ V. Let m be chosen 
uniformly from a conjugacy class M of involutions. Then 

Exp^ Kb, mb) p = II gP«P* (b b' 
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Now, given an involution m and the hidden subgroup H = {1, m}, let Um = Uh denote the projection 
operator given by IlmV = (l/2)(v + mv). Then the expectation and variance of ||nmb||^ are given by the 
following lemma, also from ll28l . 

Lemma 4. Let p be an irreducible representation acting on a space V and let h ^ V. Let m be chosen 
uniformly from a conjugacy class M of involutions. Then 

Exp„,||n^bf = ^llbf (l + ^) (3.1) 



|n„bf < l^^^fl^||jfp*(b®b*) 

o-eG 

Finally, we point out that since Exp^ ||nmb||^ = ||b||^ '"'^j^'" we have 



4 Variance and decomposition for multiregister experiments 

We turn now to the multi -register case, where Steps 1, 2 and 3 are carried out on k independent registers. This 
yields a state in C[G'^], i.e., \ciH) ® • • • ® \ckH) where the Cj are uniformly random coset representatives. 
The symmetry argument of l28l applies to each register, so that the optimal measurement is consistent with 
first measuring the representation name in each register. However, the optimal measurement generally does 
not consist of k independent measurements on this tensor product state; rather, it is entangled, consisting of 
measurement in a basis whose basis vectors b are not of the form bi (g) • • • ® b^. 

In this section, we extend the results of |28 | to the case of multiple coset states in three steps. First, 
in Section im we generalize the expressions of Lemma|4]for the expectation and variance of the observed 
distribution to the multiregister case. In Sections 14.21 and 14.31 we bound the expectation and variance of 
the probability distribution, by controlling to what extent tensor product vectors project into "bad" low- 
dimensional representations with large normalized characters. These bounds are far tighter than those in ll28l 
l29l . in which we pessimistically bounded these projections simply by estimating the multiplicity of bad 
representations. Finally, in Section l4!4l we combine these bounds to bound the expectation over p of the 
total variation distance between the observed distribution and the uniform distribution. 



4.1 Variance for Fourier sampling product states 

We begin by generalizing Lemmas 1, 2, and 3 of 1281 to the multi -register case. The reasoning is analogous 
to that of Section 4 of f28l; the principal difficulty is notational, and we ask the reader to bear with us. 

We assume we have measured the representation name on each of the registers, and that we are currently 
in an irreducible representation of labeled by p = (g) • • • (g) p^. For a subset S C [k], let us introduce 
the shorthand ps = ^ii^sP-i and (X" 1 = (2)ig5 Pi ® ^i^s 1' operating in the natural way on the vector 
space that supports p. 

Then given a subset / C [k], we can separate this tensor product into the registers inside / and those 
outside, and then decompose the product of those inside / into irreducibles: 

p = pi®Pj= {® "^'^ j ® ^ 
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where is the muhipUcity of a in pj. Now given an iiTeducible representation a, we let = 3^''^'^ 
denote the projection operator onto the subspace acted on by a^cr (8) Pj- In other words, projects the 
registers in / onto the subspaces isomorphic to a, and leaves the registers outside / untouched. Note that in 
the case where / is a singleton we have 2Jp^®^ = 1. 

As before, the hidden subgroup is i7 = {1, m} for an involution m chosen at random from a conjugacy 
class M. However, we now have, in effect, the subgroup (Z G^, and summing over the elements of 

gives the projection operator Tl^k = li^. The probability of observing a representation p under weak 
sampUng is thus 



•K{P) 



(p) = ^(rkn^)^- . 



Conditioned upon observing p, the probability we observe an (arbitrarily entangled) basis vector b G p is 

|2 



:K(p,b) = :K^^Xp,b 



rkn: 



(4.1) 



As indicated, we elide the superscripts and subscripts when they can be inferred from context. We remark 
that the distribution ^{^^{p) depends only on M and can be written as a product distribution: ^{^^{p) = 
Ylj^ !K®^(/9j). The distribution 3<®'^(p, b), on the other hand, cannot in general be decomposed in this way 
as we consider ai^bitrarily entangled bases of p as opposed to product bases. 

When we calculate the expectation of this over m, we will find ourselves summing the following quantity 
over the subsets / C [k]: 



dn 



\uihf 



(4.2) 



with £'®(b) = ||b||^ (since an empty tensor product gives the trivial representation). Note that -E'^(b) is 
real, since x<t(^) is real for any involution m. 

For the variance, we will consider pairs of subsets h, I2 C [A;] and decompositions of the form 



p<S)p 



{ph^P%) ® [Pi, ®P% 



h,l2 



a 



just as we considered p in the one-register case lEHl . We then define the projection operator 11^^'^^ = 
^(p/^(gii)®(p/2®i) onto the subspace acted on by Oct '^^<7 (g) 07 (X" pi and we define the following quantity. 



£;^i-^2(b)^ J]^^||nii'^2(bob*)||' 



(4.3) 



with^W(b) = ||bf . 

We can now state the following lemma: note that (14. 5t corresponds to (13. 2t in the one-register case. 
Lemma 5. Let b € p and let m be chosen uniformly from a conjugacy class M of involutions. Then 



Exp„ 



Var„ 



m 



V /C[fc]:/^0 / 



< 



(4.4) 
(4.5) 



h,l2C[k]:h,l2y^d 
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Proof. Let denote the operator that operates on the ith register by m for each i ^ I and leaves the 
other registers unchanged. This acts on b as pi{m), and Lemma |2l implies that Exp^(b,m^b) = E^{b). 
Then (I4.4t follows from the observation that 



n^b = 15; m^b 



and so 



Exp„ 



n^'^b 



Exp„,(b,n®» = ^ E Exp„(b,m^b) = E\h) . 



/C[fe] 



/C[fc] 



Separating out the term E^{h) = ||b||^ completes the proof of (I4.4I) . 

Similarly, let the operator m^^'^^ act on b^b* by multiplying the ith register of b by m whenever i G Ii, 
multiplying the ith register of b* whenever i ^ I2, and leaving the other registers of b and b* unchanged. 
Then it acts as {pi^ p\){m), and Lemma El implies Exp„(b ® b*, m^i'^2(b ® b*)) = E^^^^^{h). Then 
analogous to Lemmas |3l and |3 the second moment is 



Exp„ 



Exp^(b,E^^b)(b*,n®^'b*) = Exp„,(b ® h\{iC ® n®^)(b ® h*)) 

1 Exp^(b®b*,m^^'^Hb®b*)) = l ^'"''(b) 



4fc 



and so the variance is 

2 



Var^ 



n^^b 



Exp^ 



/l,/2C[fc] 



n^'^'b 



-fl,/2C[fc] 



Exp^ 



1 {E^^'^^{h)-E^^{h)E^^{h)) = ^^ Y: E^^'^Hh)-^ 



h,l2C[k] 



4k 



4fc 



(4.6) 



where we use the fact that S^''^(b) = ^"^'^(b) = E\h)\\hf = E\h). Finally follows by neglecting 
the negative term of (14. 6t . □ 

As in the case of (one-register) Fourier sampling l28l . the Plancherel distribution J'®'^(p) = dp/\G\'^ 
will play a special role in the analysis. Note that 7®^{p) = W y{pi) and that, consistent with our conven- 
tions for , we elide the superscript when it will cause no confusion. 

In the following two sections, we establish bounds, based on the expressions of Lemma|5]above, for the 
expectation and variance. Finally, we bound the expectation over p of the total variation distance between 
the observed probability distribution 3f(p, b) and the uniform distribution. These bounds will proceed by 
distinguishing a subset A C G of "bad" representations a with the undesirable property that the normalized 
character \xcf{^'I) / d(j \ is large; in all cases of interest, these representations will have low dimension. 

For a given A, we define 



A = A(M) 



max 

cr^A 



da 



We remark that associated with a set A and a conjugacy class M of involutions one may immediately 
compute an upper bound on the ^i-distance between 'K®^{-) and The triangle inequality and Equa- 

tion imply 



(E)k 



<k\\J{-?\\^ < 2k{X + T{A)) 



(4.7) 
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As we show in Section |5l in the case relevant to Graph Isomorphism this distance is n~^^'^\ This allows 
us to assume throughout that the pi are chosen according to the Plancherel measure T rather than to IH, or 
equivalently, that p is chosen according to the Plancherel measure y®^. 



4.2 Controlling the expectation 

In this section we show that the expected probability distribution Exp^ ;K®'"(p, •) is close to uniform. First, 
as we will be concerned with how representations p of decompose into irreducible G-representations, 
we note that for any a ^ G and any I 7^ 0, the expected dimension of the isotypic space coiTcsponding to a 
in pj ®1, namely da times the multiplicity a^^®^, is given by 



Expp ^^-ll. = ^ = Tia) 



dr 



\G\ 



(4.8) 



if p is chosen according to the Plancherel measure l29l . This allows us to show the following bound on the 
expectation of the involution projector. 

Lemma 6. Let A C G, let p = ®^^iPi be chosen according to the Plancherel distribution on G^, let B 
be an arbitrary basis for p, and let m be chosen uniformly from a conjugacy class M of involutions. Let 
A = A(M) be defined as above. Then 



Exp Expbgs 



Exp^ 



2 1 

~ 2^ 



< A + ^(A) . 



Proof. For any p and b, Lemma|5land the triangle inequality imply that 



Exp^ 



n^'^'b 



2k 



< 



EE 



da 



\uihf 



Pessimistically assuming that | Xa (M) | = 1 for all tr G A and applying the trivial bound X^ct^a | | | | ^ < 
1 we conclude that 

£A+iEEKHr 



Exp^ 



2 1 

~ 2^ 



7^0 o-eA 



Now observe that for any basis Bp of p we have 



Exp 



be-B 



\uihf 



since aa^'^'^da is the total dimension of the isotypic subspace of /)/ (g) 1 corresponding to a. Applying (14.8 
completes the proof. 



□ 

Corollary 7. Let A and A be defined as above and let p be selected according to the Plancherel distribution. 
Let A{p, b) = Exp^ '}i®^{p, b) and let U denote the uniform distribution on B. Then 



Expp||lt-^(p,-)|li<2-2'=(A + y(A)) . 
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Proof. Define 3(p, b) = 2*^ Exp^ ||n®'^b||^; note that unless rk li®^ = this is not generally a 

probability distribution. Then Lemma |6l above asserts that Expp HlX — J(p, •)||]^ < 2^{\ + J'(A)). Let 

E = {p ^ I Vi : Pi ^ A} and notice that as p is selected according to the Plancherel distribution, 
Pr[p G -E] > 1 - kTiA). When p e E, Equation ^3 imphes 



m 2k 



n 1+ 



2k 



:l-A)^(l+A)^ 



and hence (1 - A)'=J{(p, b) < J(p,b) < {l + \f^{p,h). Evidently p(p, •) -^K(p, Olli < (1 + A)^'-1 < 
2^ A. Pessimistically assuming that this distance is one when p ^ E and using the triangle inequality 
completes the proof. □ 



4.3 Controlling the variance 

We focus now on bounding the projectors contributing to the E^^'^'^ and hence to the variance in Lemma |5l 
(cf. Equation (14. 3t ). First, we provide a general bound on the expectation of | (b, gh) |^ where g ranges over 
the entire group. 

Claim 8. Let pbe a representation of a group G acting on a space V and let b G Let g be an element of 
G chosen uniformly at random. Then 



ExpJ(b,ffb)|2< J] 



\Xh\t 

da 



Proof. Let p = (Bjcrj, these aj being irreducible, and let V = ©V^ be the corresponding orthogonal 
decomposition of V. Write b = hj where hj G Vj, and b^ = J^b = J2j-a ?ia ^j- "^^^^ gives 

L ^ Kb,5b)|2 < jL ^1 (b,,5b,) ' = ^ E E (b.,5b,) {h„gh,r 



\G\ 



g&G j 



\G\ 



g&G j,k 



E ^b.l ( ^ E l^b.) {ghkl I |b.) = E E Kb.,b, 

j,k \ geG j cr °" j.k:aj,ak^a 

E;r E llbj-f llbfcf = E;rll^'^ll' ' 



<y 3,k:aj,ah=a 



(4.9) 
(4.10) 



as desired. Here we use Schur's lemma |TOl in (14.91) and the Cauchy-Schwartz inequality in (14. lOt . Note 

□ 



that in the inner product of ( I4.9t we regard bj and b^ as lying in the same copy of a. 
Lemma 9. With 11^'^^ defined as in Section Wj\ we have 



( 



5:i|nyHb0b*)ir<2'=d^ Y^Y. 



dr 



J 
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Proof. We can write 11^^'^^ as '^'^P'i'^'^^®'^P'2®'^') ^ y^^ere 1 and 1* act on pj^ and pi respectively. Using the 

same notation as in Section lTTI let g^^'^'^ act on b ® b* by multiplying the ith register of b by m whenever 
i S /i, multiplying the fth register of b* whenever i ^ I2, and leaving the other registers of b and b* 
unchanged. From the defining expression of Definition^we have 

||n^i'^^(b h*)f = ^ E ^'^^aT (b ® b*,/-^^(b ® b*)> = ^ E ^-(5)* (b, /^b> (b, /^b)* . 



Observe, however, that 

E ||ni^'^^(b0b*)||^ = ^\Y.^M* E (b,/^b)(b,/^b>* = ^Y.^.{gT 



9GG 



^ ^ E E I ^^'b) f = 2^=^^ E Exp. I <b, /b> I 



\G\ 



g&G I 



by the triangle inequality and Cauchy-Schwarz. Finally, we apply Claim [8l to the expectations above and 
use the fact that as ||b|| = 1, ||nb|| < ||nb|| for any projection operator 11. □ 

Then the following lemma bounds the variance of ||n®'^b||^ just as Lemma |6lbounds the expectation. 

Lemma 10. Let A C G, let p = ^fL^/Oi where the pi are independently chosen according to the Plancherel 
distribution, let B be an arbitrary basis for p, and let m be chosen uniformly from a conjugacy class M of 
involutions. Let A = A(M) be defined as above. Then 



Exp ExpbgB Var 



< A ^ A + a'(A) I E 

red 



Proof. Applying Lemma |9l to control the terms in E^^ '^^ (b) where o" G A, pessimistically assuming that 



\Xcr{M)/da\ = 1 for all u G A, and using the obvious bound X^o-^a '^^(b (g) b*) 
we see from (I4.5t that 



< 1 for the others. 



Var„ 



E ^^^'^^(b)<iEE 



XAM) 



^A + ^EEIIny^bc5b*ir = A+^(E'^^)EE- 

/i,/2 0-GA Vo-eA / I^fli^^Q 



Now we take the expectation of this over the basis B. Since Exp^g^ jpr^®'''"bj| = a'r'^'^dT/dp, we have 



ExpbeB Var, 
and Equation (I4.8t completes the proof. 



< 



weA / Iytdr(^G 



dc 



□ 
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4.4 Bounding the total variation distance 

Finally, the next lemma relates the bound of Lemma ^| to the expected variation distance of the observed 
distribution from the uniform distribution. 

Lemma 11. Let A and A be defined as above, let p be selected according to the Plancherel distribution, 
and let m be uniformly random in its conjugacy class. Let B be a basis for p and let 11 denote the uniform 
distribution on B. Then 

ExppExp„ ||Jf(p, •) - Kill < 2^ [(1 - A)-^^VA + 3 • (A + y(A)) 
where A is defined as in Lemma UU\ 

Proof. As in CorollaryQ let A{p, b) denote Exp„ ^(p, b). Then we have, analogous to LemmaQ 
ExppExp^ ||:K(p,-) - A(p,-)|li = ExppExp„ ^ \%{p,h) - A{p,h)\ 

heB 



< Exp.Exp„ Jd2 Expbgs |:K(p, b) - A{p, h)\' < Exp. JExp„ c?2 Exp^eB l^(p, b) - Aip, b 



Exp jExpbes dlYaVm ^{p, b) <2'{1- A)-'= Exp^ A/ExpbeB Var 



+ k-J>{A) 



<2'^(l-A)S/Exp„ExpbeBVar, 



n®^'b 



The proof is completed by LemmafTOl Corollary and the triangle inequality. 



□ 



5 The total variation distance 



Having established the generic bounds of the previous sections, it remains simply to apply them to a given 
group, using a description of its ineducible representations and a choice of the subset A. The standard 
reduction from Graph Isomorphism yields permutations of 2n objects, namely the vertices of two graphs of 
n vertices each. However, rather than all of S2n, it suffices to consider the subgroup K = Sn I "^2 C. S2n 
consisting of permutations which either fix the two vertex sets or swap them. 

The irreducible representations of K and their characters are discussed in the Appendix. Our choice of 
"bad" representations A C K consists of those induced up from representations p p of Sn x Sn with the 
property that dp < n"/^. Simple counting arguments then show that A < n~"/^, y(A) = 7j-6n/5gO(n)^ ^^^^ 
A = n~"/^e'^^"^ where A is as defined in Lemma flOl With the understanding that k = n'-'^^\ we have 
(1 — A)~'^ = 1 + o(l) and we find that the expected variation distance in LemmafTDis 

ExppExp^ IMp,-) - U||i < 2^n-"/i°e°('^) . 

Thus if < Cnlog2n where C is bounded below 1/10, this is and by Markov's inequality the 

probability in p and m that ||?{(p, •) — IXII^^ > n~^^^'> is no more than n~^("). Finally, since by Equation l4.7l 
ll^(-) - ^(Olli < 2(A + y{A)) = n-^("), any event that holds with probability Q in holds with 
probability Q — in ^K(-). This completes the proof of Theorem^ we have made no effort to optimize 

the constant C. 

We remark that these bounds can be established if 5„ is replaced with any group G for which a sufficient 
fraction of the Plancherel measure lies on high-dimensional representations. For any such group, the hidden 
subgroup problem on G ? Z2 requires entangled measurements on 6(77, log n) coset states. 
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A The group generated by structured involutions 

In this section we review the representation theory of the symmetric group Sn, and describe the representa- 
tions of the subgroup of S2n relevant to Graph Isomorphism. First, recall that the iiTcducible representations 
p of Sn are labeled by Young diagrams, or equivalently integer partitions Ai > A2 > • • • > At such that 

Aj = n. The number of irreducible representations is then the partition number p{n) = e*^^^^. 

In the standard reduction from Graph Isomorphism, we consider subgroups { 1 , m} where m is an in- 
volution consisting of n disjoint transpositions, matching each vertex in one graph with the corresponding 
vertex in the other. However, rather than considering all such conjugates in S2n, it makes sense to focus on 
those involutions m which map {1, . . . , n} to {n + 1, . . . , 2n}, which we identify with the vertex sets Vi 
and V2 of the two graphs. Such m lie inside a subgroup of S2n '- namely, if s denotes a canonical involution 
(1 n + 1)(2 n + 2) . . . (n 2n), then m = a^^sa where a permutes Vi. 

The set of all such involutions generates a subgroup K of 52„. Let Sn,n denote the Young subgroup Sn,n 
which fixes the sets Vi and V2; then K is the subgroup generated by Sn,n and s. Algebraically, K is the 
wreath product Sn I and can also be written as a semidirect product K = (S„ x 5„) x Z2. If a, /? G 5„ 
and t G Z2, we denote by {{a, (3),t) the element which applies a to Vi and [5 to V2, and then apphes s*. 
Note that \K\ = 2n9 = n^^e-^^*"). 

We can determine K's, in^educible representations and their characters as follows. For two irreducible 
representations p and a of 5^, let p Kl a denote their tensor product as a representation of Sn^n — Sn x Sn. 
We consider the induced representation Tjp g-} = I'^^Sn ^ ^^'^ denote its character X{p,a}- It is easy 
to see that 

'0 ift = l 

Xp{a)Xa{(3) + Xa{a)xpif3) if t = ; 



X{p,a}{{{a,P),t)) 
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as the notation suggests, this depends only on the multiset {p,cr}. An easy computation shows that 
{X{p,a}jX{p,a}) = 1 + <)p,(T- Thus, if p ^ a, then Ts^p^a} is irreducible of dimension 2dpda-', while if 
p = a then it decomposes into two irreducible representations of dimension d^, 

•^{p,p} - ^{p,p},l © '^{p,p},7r 

where 1 and vr are the trivial and sign representations, respectively, of Z2. Each of these irreducible repre- 
sentations acts on Vp^Vp, the vector space supporting the action of pMp. Both of them realize the element 
((a,/3),0) as the linear map p{a) p{P), while Tj^ pj and Tj^ pj realize the element ((1, 1), 1) as the 
maps which send u v to v (g) u and — v ig) u respectively. The characters of these representations are 

t( /xp(a) + Xp(/5) ift = fxp(a) + Xp(/5) if t = 

X{p,p}Ai(^^f^)'t) = { f -f^ 1 ' X{p,p},^((a,/3),i) = < ... ..^ ^ 

In particular, since m is of the form ((a, a~^), 1), we have the normalized chai'acters 

X{p,p},lM _ 1 X{p,p},7r{m) _ 1 



'^{p,p},i dp d^pp^.^ dp 



(A.l) 



and X{p,a} {™) = for all p^ a. 

We remark that this construction of the irreducible representations and their characters works for any 
group of the form G ll^^- In particular, the normalized characters of the involutions that "swap" the two 
copies of G are either or it 1 /dp for some p £ G. 

If we choose A to consist of those r^p p} ^ and T^p^p}^-n- such that dp < n"/^, then by by (IA.lt we have 
A < n~"/^. Since there are at most p(n)^ irreducible representations of K we have 

y(A) = Y,dl/\K\ < p{nf n^"^'^ /\K\ = n-s^/Sg^W . 

reA 

Similarly, since no irreducible representations of K can have dimension greater than y^j^^, the quantity A 
defined in LemmafTOlis bound by 

red 
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